Frequently asked questions,
direct answers.

Mostly small and medium-sized companies, entrepreneurs and professionals who need structure in order to grow, and organisations preparing documentation for financial institutions or international partners. There is no minimum size; there is a requirement that someone on the client side has the authority to decide.

Yes. The company is based in Guarda, Portugal, and works with clients in Portugal and Mozambique, as well as with international partners. We work in Portuguese and English, on site or remotely, depending on what the project requires.

No. JANELAMBICIOSA provides consultancy services only. We are neither a financial institution nor a payment institution, we do not provide custody, exchange or intermediation of virtual assets, and we do not provide investment advice. Our digital-asset work covers regulatory framing, risk analysis and preparing compliance processes.

It depends on the service. Diagnostics and analyses are fixed-price, set after an initial conversation at no cost. Implementation projects are quoted by phase, so you can assess each one before moving to the next. Ongoing support is contracted as a monthly retainer. In every case, scope and price are put in writing before we start.

Yes, it is free. The initial consultation exists so we can understand the problem and judge whether we are the right people to solve it. If we are not, we say so and, whenever possible, point you to who is.

A diagnosis typically closes in two to four weeks. A strategic plan, in four to eight. Implementation projects depend on scope and are split into four to six week phases, each with a verifiable deliverable. We prefer visible partial deliveries to months of silence followed by a report.

Management is directly involved in every project. Where a piece of work requires specialist skills, we draw on a partner network — always with your prior knowledge, and always with a confidentiality agreement signed before any access to your information.

Yes, by default. We propose a confidentiality agreement before the first working session, even where there is no contract yet. If you prefer your own template, we review and sign yours.

The client does. Documents, models, code and credentials are held in your company’s name once the work is paid for. We do not retain access or create vendor lock-in. This is a contractual condition, not a courtesy.

Within 24 business hours, with a reply from a person rather than an automated acknowledgement. Enquiries received at the weekend are answered on Monday.

We provide the permanent commercial registry certificate (by access code, which replaces paper), the beneficial ownership declaration, proof of registered address, identification of management, corporate structure and the applicable internal policies. Requests are made at Trust Center → Documents and answered within 24 business hours.

No, and it does not need to be for the activity it carries out. JANELAMBICIOSA provides consultancy services. It is not registered with the Bank of Portugal for virtual asset activities, nor authorised as a crypto-asset service provider under Regulation (EU) 2023/1114. Its main activity code — 66190 — covers activities auxiliary to financial services, the category the consultancy falls under, and neither grants nor requires prudential authorisation.

We identify the client and, for companies, the beneficial owner. We verify the entity’s existence and registration status, the identity of whoever represents it, and the nature of the activity. Where risk justifies it, we ask about source of funds. We decline work we cannot frame or whose purpose is unclear.

Under the GDPR, with a defined purpose, a defined retention period and restricted access. We do not sell data, do not use it for marketing without consent, and do not transfer it outside the European Economic Area without adequate safeguards. Details are in the Privacy Policy, and the record of processing activities is available on request.

In services hosted in the European Economic Area, with encryption in transit and at rest, mandatory two-factor authentication and access limited to whoever is working on the project. Backups run daily and are tested periodically.

We follow an incident management procedure covering detection, containment, analysis and communication. Where an incident involves personal data and poses a risk to data subjects, we notify the Portuguese Data Protection Authority within 72 hours and inform affected clients. Vulnerabilities in this website can be reported through the contact listed at /.well-known/security.txt.